Security Operations Lead: Threat Detection & Incident Response

Arla Foods; Aarhus; On-site; DKK 900,000 - 1,100,000; Full time

Job summary

Arla Foods is seeking a Security Operations professional to own and evolve detection, monitoring and incident response across endpoint, identity, network, application and cloud environments. You will work with MSPs and internal teams to deliver robust protection for our global IT landscape.

You'll apply expertise in SIEM/EDR/XDR technologies, coordinate complex investigations, and drive improvements to playbooks and automation.

Qualifications

• A bachelor’s or master’s degree in IT, cybersecurity or related field, or equivalent experience.
• Typically 5+ years in cybersecurity, with security operations, monitoring, investigations and incident response.
• Experience owning complex security investigations and coordinating across teams/providers.
• Solid knowledge of SIEM, SOAR, EDR, monitoring, and vulnerability management.
• Understanding MITRE ATT&CK, NIST and ISO 27001 frameworks.
• Experience with security logging, telemetry, evidence collection and forensic analysis.
• Scripting and automation skills to assess solutions and drive improvements with providers.
• Experience guiding managed security service providers and collaborating with internal teams.

Responsibilities

• Taking ownership of Security Operations capabilities and ensuring ongoing effectiveness.
• Overseeing monitoring and investigations by MSPs, and guiding complex cases.
• Coordinating incident response across providers and internal teams.
• Driving improvements to detection rules, correlation logic, and incident-playbooks with providers.
• Assessing vulnerabilities and security-control weaknesses.
• Managing service providers’ technical quality and performance.
• Providing risk-based security guidance to projects and product teams.
• Leading Security Operations improvement initiatives and sharing security expertise across IT.

Skills

Security Operations

Incident response

Threat detection

Automation & scripting

Vendor coordination

Education

Bachelor’s/Master’s in IT or Cybersecurity

Tools

Microsoft Sentinel

Defender XDR

KQL

Palo Alto

Job description

Arla Foods is seeking a Security Operations professional to own and evolve detection, monitoring and incident response across endpoint, identity, network, application and cloud environments. You will work with MSPs and internal teams to deliver robust protection for our global IT landscape.

You'll apply expertise in SIEM/EDR/XDR technologies, coordinate complex investigations, and drive improvements to playbooks and automation.